SecEng-Exercises/delete_iam.sh at main · fosres/SecEng-Exercises · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
# Delete policy attachments first
aws iam detach-user-policy \
  --user-name neo \
  --policy-arn arn:aws:iam::510537392097:policy/cloudwatch-read-only \
  --profile lab-sso

aws iam detach-role-policy \
  --role-name github-actions-terraform \
  --policy-arn arn:aws:iam::aws:policy/PowerUserAccess \
  --profile lab-sso

# Delete custom policies
aws iam delete-policy \
  --policy-arn arn:aws:iam::510537392097:policy/cloudwatch-read-only \
  --profile lab-sso

aws iam delete-policy \
  --policy-arn arn:aws:iam::510537392097:policy/cloudwatch-full-access \
  --profile lab-sso

# Delete IAM user
aws iam delete-user \
  --user-name neo \
  --profile lab-sso

# Delete IAM role
aws iam delete-role \
  --role-name github-actions-terraform \
  --profile lab-sso

# Delete OIDC provider
aws iam delete-open-id-connect-provider \
  --open-id-connect-provider-arn arn:aws:iam::510537392097:oidc-provider/token.actions.githubusercontent.com \
  --profile lab-sso